Lucene search
K

EuroTel ETL3100 Transmitter Default Credentials

🗓️ 09 Aug 2023 00:00:00Reported by Gjoko KrsticType 
zeroscience
 zeroscience
🔗 www.zeroscience.mk👁 302 Views

EuroTel ETL3100 Transmitter Default Credentials. Weak default admin credentials allow remote attacks to gain full system control

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2023-6928
20 Dec 202313:53
circl
CNNVD
EuroTel ETL3100 Security Vulnerability
19 Dec 202300:00
cnnvd
CVE
CVE-2023-6928
19 Dec 202322:58
cve
Cvelist
CVE-2023-6928 Improper Restriction of Excessive Authentication Attempts
19 Dec 202322:58
cvelist
EUVD
EUVD-2023-59126
3 Oct 202520:07
euvd
ICS
EuroTel ETL3100 Radio Transmitter
19 Dec 202307:00
ics
NVD
CVE-2023-6928
19 Dec 202323:15
nvd
Prion
Default credentials
19 Dec 202323:15
prion
Positive Technologies
PT-2023-8053 · Eurotel · Eurotel Etl3100
29 Apr 202300:00
ptsecurity
RedhatCVE
CVE-2023-6928
23 May 202504:56
redhatcve
Rows per page
<html><body><p>EuroTel ETL3100 Transmitter Default Credentials

Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L
Product web page: https://www.eurotel.it | https://www.siel.fm
Affected version: v01c01 (Microprocessor: socs0t10/ats01s01, Model: ETL3100 Exciter) 
                  v01x37 (Microprocessor: socs0t08/socs0s08, Model: ETL3100RT Exciter)


Summary: RF Technology For Television Broadcasting Applications.
The Series ETL3100 Radio Transmitter provides all the necessary
features defined by the FM and DAB standards. Two bands are provided
to easily complain with analog and digital DAB standard. The Series
ETL3100 Television Transmitter provides all the necessary features
defined by the DVB-T, DVB-H, DVB-T2, ATSC and ISDB-T standards, as
well as the analog TV standards. Three band are provided to easily
complain with all standard channels, and switch softly from analog-TV
'world' to DVB-T/H, DVB-T2, ATSC or ISDB-T transmission.

Desc: The TV and FM transmitter uses a weak set of default administrative
credentials that can be guessed in remote password attacks and gain full
control of the system.

Tested on: GNU/Linux Ubuntu 3.0.0+ (GCC 4.3.3)
           lighttpd/1.4.26
           PHP/5.4.3
           Xilinx Virtex Machine


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2023-5782
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5782.php


29.04.2023

--


Using Username "user" and Password "etl3100rt1234" the operator will enter in the WEB interface in a read-only mode.
Using Username "operator" and Password "2euro21234" the operator will be able also to modify some parameters in the WEB pages.
</p></body></html>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Aug 2023 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 3.19.8
EPSS0.00082
302